CVE-2014-9382: Cross-Site Request Forgery (CSRF)

Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation...